Abstract:Abstract The system design process needs to cope with the increasing complexity and size of systems,motivating the replacement of labor intensivemanual techniques with automated and semi-automated approaches.Recently, formal methods techniques, such as model-based verification and safety assessment, have been increasingly used to model systems under fault and to analyze them, generating artifacts such as fault trees and FMEA tables. In this paper, we show how to apply model-based techniques to a realistic case study from the avionics domain: a high integrity power distribution system, the Triple Modular Generator (TMG). The TMG is composed of a redundant and reconfigurable plant and a controller that must guarantee a high level of reliability. The case study is a significant challenge, from the modeling perspective, since it implements a complex reconfiguration policy, specified via a number of requirements in natural language, including a set of mutually dependent and potentially conflicting priority constraints. Moreover, from the verification standpoint, the controller must be able to handle an exponential number of possible faulty configurations. Our contribution is twofold. First, we formalize and validate the requirements and, using a constraint-based modeling style, we synthesize a correct by construction controller, avoiding the enumeration of all possible fault configurations, as is currently done by manual approaches. Second, we describe a comprehensive methodology and process, supported by the xSAP safety analysis platform that targets the modeling and safety assessment of faulty systems. Using xSAP, we are able to automatically extract minimal cut sets for the TMG. We demonstrate the scalability of our approach by analyzing a parametric version of the TMG case study that contains more than 700 variables and 90 faults.

Model-based safety assessment with SysML and component fault trees: application and lessons learned

Lessons Learned from Model-Based Safety Assessment with SysML and Component Fault Trees

Model-Based Reliability and Safety: Reducing the Complexity of Safety Analyses Using Component Fault Trees

Fusion Assessment of Safety and Security for Intelligent Industrial Unmanned Systems

Dynamic Fault Tree Generation and Quantitative Analysis of System Reliability for Embedded Systems Based on SysML Models

Integrated model-based design and functional hazard assessment with SysML on the example of a shock control bump system

Verification of Component Fault Trees Using Error Effect Simulations

Fault Tree Generation and Analysis Based on Extended SysML Model

Simulation-based Safety Assessment of High-level Reliability Models

A system-theoretic assurance framework for safety-driven systems engineering

A Method for Constructing Fault Trees from AADL Models.

Automatic Generation of Component Fault Trees from AADL Models for Design Failure Modes and Effects Analysis

Model-based Safety Assessment of a Triple Modular Generator with xSAP

A Systematic Approach for Integrating Fault Trees into System Statecharts

Enhancing Software Safety by Fault Trees: Experiences from an Application to Flight Critical SW

ArChes -- Automatic generation of component fault trees from continuous function charts

Combination of component fault trees and Markov chains to analyze complex, software-controlled systems

Research on Modeling Method of Testability Design Based on Static Automatic Fault Tree

Automated Transformation of UML/SysML Behavioral Diagrams for Stochastic Error Propagation Analysis of Autonomous Systems

Safety SysML: an Executable Safety-Critical Avionics Requirement Modeling Language

Model-Based Generation of Attack-Fault Trees